Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: GiUUKk6kw+hDw5yS8u+8etMrrS6UYU4kUN42dcp+1cE=
Subject key identifier: 71:BC:32:C3:E0:7B:90:26:AE:B6:26:67:CA:C2:46:6A:DC:E2:74:36
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 01A10E83179526C9394A0A4F310A2FDF099C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 1A98
Signing time: Tue 06 Oct 2026 00:00:34 +0000
Manifest this update: Tue 06 Oct 2026 00:00:34 +0000
Manifest next update: Wed 07 Oct 2026 00:00:34 +0000
Files and hashes: 1: 0IWvtKpWz8nwzfyztFPG-10e-ec.roa (hash: M3DL2KpstDY4RX5irHxTIoQ7SYVzPk7eR23DZZrDMbo=)
2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: h23wDeZM4vUPzUC7PyHRcvJyEOZvcsVyPIYD+kgQidA=)
3: pYVSN2AB9mwBr8yDS1zYwXrTuMQ.roa (hash: xWYPQfiNQqIYcOLgwTTjRZ9fSTqKYlkmjs7r1ngIGF4=)
4: uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa (hash: 8z/tTyMqQq524Fl02SLcRSjti3sQ0AEo40zN2vpCYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:83:17:95:26:c9:39:4a:0a:4f:31:0a:2f:df:09:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Oct 6 00:00:34 2026 GMT
Not After : Oct 7 00:00:34 2026 GMT
Subject: CN=71bc32c3e07b9026aeb62667cac2466adce27436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:c4:b1:9c:6e:87:73:f6:d5:ee:56:f8:ce:
49:2c:f1:75:96:e0:b4:ba:22:b5:d6:59:c6:4c:3e:
db:64:63:ac:fa:99:67:c2:b3:e8:97:0c:d4:4e:92:
1f:c0:86:6b:d9:1d:f3:76:1a:33:21:02:0e:b9:88:
51:88:3b:c8:62:0a:b7:fc:49:a5:5a:cd:3c:98:e9:
e0:88:7d:15:a5:8d:bb:67:a3:6a:90:37:da:d1:bf:
5d:e5:24:6a:06:83:cd:df:cc:0f:98:b0:29:4d:5e:
6e:78:cd:e7:41:a8:74:b0:ec:94:7a:e3:a7:d4:1c:
2f:da:d4:01:4c:02:20:bc:e6:74:df:5f:e7:a6:41:
43:7b:86:f9:b7:18:8a:07:d6:1a:13:e3:36:f9:ed:
68:78:5b:c5:4e:e4:d9:0c:a9:af:df:0d:7b:51:5e:
1c:bb:88:88:46:52:fd:ae:74:39:e0:4e:74:2c:a7:
11:28:4a:36:c1:72:d0:f3:93:e4:4c:ce:9f:0d:35:
21:13:57:9c:82:4a:27:79:da:3b:96:49:a3:4c:88:
4b:49:62:04:5e:c6:92:79:f8:ef:82:74:bb:a5:6b:
6a:ce:db:0d:48:db:96:11:44:e8:0a:61:6f:d5:09:
69:6b:5c:6a:39:e3:e5:d7:32:24:06:10:4d:56:8d:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BC:32:C3:E0:7B:90:26:AE:B6:26:67:CA:C2:46:6A:DC:E2:74:36
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:56:b7:af:ff:b4:c1:a3:37:51:9f:8c:03:5e:60:c9:b5:ad:
ee:29:f3:49:6f:12:b5:b8:47:9a:52:59:09:3b:a4:7e:65:ed:
31:ed:fe:57:3b:15:27:a0:6c:bb:ff:80:86:8c:f8:0b:b7:7b:
da:6d:57:68:2c:19:d3:21:e7:45:64:96:15:b4:c9:8e:38:24:
ee:6c:90:58:36:82:28:73:a2:7e:a0:d3:d6:85:04:20:34:8d:
d0:98:6c:2d:99:40:2a:ea:2a:85:eb:5a:f1:7f:25:3a:2b:c6:
96:6a:18:c2:9b:45:6c:09:33:60:eb:e5:55:6a:5e:07:f2:1b:
b5:f7:d6:78:26:72:32:3e:e7:50:20:21:85:f2:9c:17:51:6e:
0e:98:9c:f0:29:d8:ad:c6:9f:34:68:fd:6f:54:c9:01:1e:a5:
ce:d1:51:3d:b1:b8:bc:6c:4b:dd:cd:f9:0f:20:ee:75:c4:f6:
e3:cc:3e:c7:0a:93:23:81:71:7f:9d:60:5e:e8:da:71:5b:b2:
52:f6:b5:ea:79:7b:5b:62:a6:b3:77:59:b2:7a:fc:aa:d2:d3:
d3:70:ff:34:14:6e:cf:30:9f:58:94:ef:dd:f6:a8:df:4b:06:
21:4f:21:1d:f0:81:ae:8f:0c:ea:a9:39:74:8b:6e:c6:47:bb:
8a:eb:f5:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEOgxeVJsk5SgpPMQov3wmcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMjE1MjFhNzEyNzE1N2Y3ZGFmMGFkMDkxMzk0YWQ1YTFj
Y2U3NzkwHhcNMjYxMDA2MDAwMDM0WhcNMjYxMDA3MDAwMDM0WjAzMTEwLwYDVQQD
Eyg3MWJjMzJjM2UwN2I5MDI2YWViNjI2NjdjYWMyNDY2YWRjZTI3NDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMjEsZxuh3P21e5W+M5JLPF1luC0
uiK11lnGTD7bZGOs+plnwrPolwzUTpIfwIZr2R3zdhozIQIOuYhRiDvIYgq3/Eml
Ws08mOngiH0VpY27Z6NqkDfa0b9d5SRqBoPN38wPmLApTV5ueM3nQah0sOyUeuOn
1Bwv2tQBTAIgvOZ031/npkFDe4b5txiKB9YaE+M2+e1oeFvFTuTZDKmv3w17UV4c
u4iIRlL9rnQ54E50LKcRKEo2wXLQ85PkTM6fDTUhE1ecgkonedo7lkmjTIhLSWIE
XsaSefjvgnS7pWtqztsNSNuWEUToCmFv1Qlpa1xqOePl1zIkBhBNVo3J6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHG8MsPge5AmrrYmZ8rCRmrc4nQ2MB8GA1UdIwQY
MBaAFA8hUhpxJxV/fa8K0JE5StWhzOd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQt
ZmFkNWZkNzk3MGJhLzEvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQtZmFkNWZkNzk3MGJh
LzEvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVa3r/+0
waM3UZ+MA15gybWt7inzSW8StbhHmlJZCTukfmXtMe3+VzsVJ6Bsu/+Ahoz4C7d7
2m1XaCwZ0yHnRWSWFbTJjjgk7myQWDaCKHOifqDT1oUEIDSN0JhsLZlAKuoqheta
8X8lOivGlmoYwptFbAkzYOvlVWpeB/IbtffWeCZyMj7nUCAhhfKcF1FuDpic8CnY
rcafNGj9b1TJAR6lztFRPbG4vGxL3c35DyDudcT248w+xwqTI4Fxf51gXujacVuy
Uva16nl7W2Kms3dZsnr8qtLT03D/NBRuzzCfWJTv3fao30sGIU8hHfCBro8M6qk5
dItuxke7iuv19g==
-----END CERTIFICATE-----
Generated at Tue Oct 6 11:33:53 2026 by rpki-client